[All remote jobs](https://jobicy.com/jobs.md)[![Filigran logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/11/7b905d81717f-221.webp)](https://jobicy.com/company/filigran.md)[Filigran](https://jobicy.com/company/filigran.md) # Senior Software Engineer – OpenCRQ AI Summary Filigran ищет Senior Software Engineer в небольшую команду OpenCRQ, развивающую продукт количественной оценки киберрисков. Инженер будет владеть задачами полного цикла: от проработки неоднозначных продуктовых и архитектурных решений до реализации, сквозного тестирования и проверки с пользователями. Основные направления включают TypeScript-разработку, PostgreSQL, вероятностные модели риска, интеграции со стандартами и продуктами кибербезопасности, а также надёжные ingestion-пайплайны. Роль предполагает заметную техническую автономию, работу с открытым исходным кодом и тесное взаимодействие с инженерами, продуктом и техническим руководством.[Apply for this job](#job-application)[View company](https://jobicy.com/company/filigran.md)ShareRemote from[France](https://jobicy.com/job-region/france.md)SalaryUndisclosedDepartment[Software Engineering](https://jobicy.com/categories/engineering.md)EmploymentFull TimeExperienceDirectorPublished9 Nov 2026Apply before9 Dec 2026Listing views41Application actions1Application toolkit ## Make your next move. Prepare your resume, explore your fit, and draft a cover letter for this opportunity. Opportunity details ## About this role. ### 🌀 The Company Founded in 2022, [Filigran](https://jobicy.com/company/filigran.md) is a global cybersecurity company on a mission to empower defense teams to be proactive through open-source solutions that uncover threats and drive action. Filigran stands out in the cybersecurity ecosystem through its open-source, AI-powered and threat-informed approach to Continuous Threat Exposure Management (CTEM). Our eXtended Threat Management (XTM) platform brings together threat intelligence, exposure validation and cyber risk reduction, enabling organizations to better understand their threat landscape and take action. At the heart of Filigran is our open-source approach. Our vision is to unite defenders into a global community to make security more open, resilient and collaborative. As Filigran continues to scale globally, we are building the organization, infrastructure and capabilities needed for our next stage of growth. How we scale matters just as much as how fast we scale: our CORE values: Cohesion, Openness, Responsibility and Equity shape how we work together, make decisions and build for the future. ### 🎯 The Role We are looking for a Senior Software Engineer who is curious about the modeling problem underneath cyber risk and wants to help shape a young product. You will join OpenCRQ as its fourth engineer and work across the data model, backend and product surface. Many foundations are still being defined, giving you meaningful influence beyond the features you directly own. You will shape these decisions with the squad and experienced engineering and product leaders across Filigran. We value constructive disagreement, clear reasoning and shared outcomes, and we expect everyone to ask for context, challenge assumptions and learn from one another. ### 🧩 The problem you would be working on Ask a CISO what a cyber risk could cost, and the answer often still begins with a color: red, amber or green, often produced by a spreadsheet disconnected from current evidence. OpenCRQ replaces that color with a financial estimate and a traceable chain of evidence: which threat actors are active, which assets they can reach, which controls have proven effective and what the remaining exposure could cost. Every step is computed from live data and must withstand a simple question from a board: “Where does that figure come from?” That is what makes this an engineering problem rather than a reporting one. OpenCRQ is Filigran’s cyber risk quantification product. It combines threat intelligence from OpenCTI, exposure and control validation from OpenAEV, and agentic workflows through XTM One. As these products become more connected, the squad will define what agents can ask of the risk model, which evidence they can use and how their answers remain safe and explainable. ### 🛠️ What you would work on * End-to-end product ownership. Take product problems from early ideation and technical design through implementation, end-to-end testing and validation with users. You will have the autonomy to drive the work, while using the squad to challenge assumptions and improve the outcome. * The quantification engine. Turn threat frequency, control effectiveness and asset value into probabilistic loss distributions. Build general-purpose quantitative models that can evolve as assumptions and available evidence change, without losing reproducibility or explainability. * The correlation layer. Model complex relationships across OpenCRQ, OpenCTI, OpenAEV and customer systems. Map threat intelligence, including intrusion sets, techniques, campaigns and observations, to assets, vulnerabilities, exposures and control coverage. This includes adapting OpenCRQ to open standards and schemas such as STIX and OCSF, without coupling the product to a single representation. * Reliable ingestion at scale. Process hundreds of thousands of findings per tenant through delta syncs, long-running backfills and feeds with imperfect timestamps. You will help design observable, recoverable pipelines while extending tenant isolation as the domain grows. * The agentic surface. Design the contracts used by XTM One agents and the plain-language explanations behind risk figures. Together, the squad will define what models can safely do in a product whose outputs inform board-level decisions. ### 🏆 What success could look like Priorities will evolve with the product, but within your first 6 to 12 months you could have: * Taken a meaningful product problem from early ideation through implementation, end-to-end testing and validation with users. * Shaped a core part of OpenCRQ’s interconnected data model or quantification engine and documented the trade-offs behind it. * Made a major ingestion or calculation path more observable, recoverable and reproducible. * Defined or implemented a durable contract between OpenCRQ and another Filigran product or an open standard, without making the internal model brittle. * Helped ship risk results that users can trace back to the evidence that produced them. * Contributed to the open-source release and to engineering practices the growing squad can build on. ### 🌐 Open source, like the rest of Filigran OpenCRQ is about to become Open source, alongside OpenCTI and OpenAEV. You will contribute visibly to a product whose risk calculations can be inspected, challenged and improved by the organizations running it. ### 👥 The squad You will join two senior engineers and a staff engineer, reporting to OpenCRQ’s Engineering Manager. The squad is small enough for you to influence its direction, without working in isolation. You will collaborate with the VP of Technology, CTO and Principal Engineers on technical standards, and with the OpenCTI, OpenAEV and XTM One teams on cross-product contracts and integrations. These relationships bring domain knowledge and broader technical context into the squad’s decisions as it grows. ### ✨ What will help you succeed We do not expect you to arrive with expertise in cyber risk or every standard named below. We are looking for a strong software engineer who can learn quickly, work autonomously and use the squad to challenge and improve decisions. * A track record of taking complex product problems from an ambiguous idea to a validated outcome: framing the problem, making technical decisions, implementing the solution, testing it end to end and checking that it solves the user’s need. * Strong experience with a modern TypeScript stack and practical knowledge of PostgreSQL beyond the ORM. You treat failure modes and observability as part of the design. * The ability to reason about complex relationships across systems and design interconnected data models that remain coherent as concepts and integrations evolve. * Comfort turning quantitative concepts into maintainable software. Formal training in statistics is not required, but you should be willing to work with probability distributions, orders of magnitude and models whose assumptions evolve over time. * Thoughtful use of coding agents: you know where they accelerate engineering and where their output needs careful verification. * Fluent English is required. ### 💡 Useful, but not required Any of the following would help, but none is expected: * Experience in cybersecurity, GRC or risk quantification. * Familiarity with STIX/TAXII, OCSF, MITRE ATT&CK or other open cybersecurity standards and frameworks. * Experience shipping features involving LLM agents, RAG or MCP. ### ⚙️ The stack TypeScript end to end: React, Vite and TanStack Router on the frontend; Node.js, Fastify and tRPC on the backend; PostgreSQL with a code-first schema and Drizzle, all in one monorepo. OpenCRQ ships as a container, both as SaaS and on customer-managed infrastructure. We use OpenTelemetry for traces, metrics and logs, alongside Prometheus and continuous profiling. A significant part of the design work happens at the boundaries between OpenCRQ, the rest of Filigran’s product suite and customer security tooling. You will work directly with the teams that own those systems rather than having to navigate those boundaries alone. ### 🌱 Why Join Filigran? More than just a job. We are a fast-growing, global and remote-first company, and we believe the best work combines purpose, impact and innovation. You’ll work alongside talented people across the world who care about what they build, how they build it, and the impact they make on the broader cybersecurity ecosystem. ⭐ Be part of something bigger We believe we do work that matters. Our open-source approach means that work extends beyond Filigran. You’re contributing to technology and ideas that strengthen a global community of defenders and help make cybersecurity more open and collaborative. 💻 Work at the edge of what’s next We bring together cybersecurity, open source and AI — giving you the opportunity to work with emerging technologies, experiment with new ways of working, and contribute to how they are applied in practice. 🌍 Global opportunity without borders Be part of a fast-growing, truly international team — collaborating across Europe, North America, APJ and beyond, with the flexibility of a remote-first environment. As we grow, you’ll have opportunities to expand your scope, take ownership, learn quickly and grow with us. 🧭 A culture grounded in CORE Cohesion, Openness, Responsibility and Equity define how we work together — with openness, ownership, collaboration and respect. These are the principles that guide how we make decisions, treat people and grow together, especially when no one’s watching. ### 💰 What you can expect * Competitive compensation + equity — everyone shares in our success * Remote-first flexibility — work from wherever you’re based, with flexibility built into how we operate * 25 days PTO baseline — real time to disconnect, recharge and enjoy life outside work * Volunteer days — paid time to contribute to causes that matter to you * Set up for success — choose the equipment that works for you, with additional support for your remote work and development needs as our programs evolve * Two annual in-person get-togethers — one global company get-together and one team get-together, creating dedicated time to connect, collaborate and strengthen our culture beyond the screen ### 🌍 Equal Employment Opportunity We enable cybersecurity through inclusion — from code to culture. At Filigran, we are proud to be an equal opportunity employer. We believe the diversity of our people makes our products and our team stronger. We welcome talent of every background, identity and lived experience, regardless of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, age, disability or veteran status. What matters here is what you bring, not what you look like, where you’re from or how you identify. ### 🚀 Ready to Join Us? Apply now and help us build the future of the cybersecurity ecosystem, together. Show more [Apply now >](https://jobicy.com/jobs/160686-senior-software-engineer-opencrq.md) > Annual salary information is not provided for this position. Explore salary ranges for similar roles in our [Salary Directory ›](https://jobicy.com/salaries.md) * ![Upload CV](data:image/svg+xml;base64,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) ### Upload your resume now To unlock remote work opportunities and be discovered by global employers. This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content. ## Role DNA A quick view of the complexity, pace, ownership and collaboration implied by the job description. ### Job Complexity 5/5EasyHard ### Pace & Pressure 4/5RelaxedFast-paced ### Autonomy Level 5/5GuidedFull ownership ### Communication Load 4/5IndependentCollaborative AI insightЭто сложная senior-роль на стыке распределённых систем, моделирования данных, вероятностной оценки рисков и cybersecurity-интеграций. Необходимо самостоятельно принимать архитектурные решения в ещё формирующемся продукте и делать результаты расчётов объяснимыми и воспроизводимыми. ## Salary analysis Estimated compensation compared with the broader US market for similar roles. Estimated job median (per year)Market rate$150,000US market range (per year)$130k–$180k0$198.00k AI insightThe yearly pay period is inferred from the job context; it was not explicitly stated by the employer. Работодатель не раскрыл базовый оклад: упомянута только конкурентная компенсация с equity. Для анализа выбран годовой период как наиболее вероятный для полной senior engineering-роли; ориентировочная оценка рынка США составляет $130,000–$180,000 в год, с медианой $150,000 в год. Это оценка, а не заявленная работодателем компенсация. ## Core skills Skills and capabilities most closely associated with this opportunity. [TypeScript](https://jobicy.com/jobs?search_keywords=TypeScript.md)[React](https://jobicy.com/jobs?search_keywords=React.md)[Node.js](https://jobicy.com/jobs?search_keywords=Node.js.md)[Fastify](https://jobicy.com/jobs?search_keywords=Fastify.md)[PostgreSQL](https://jobicy.com/jobs?search_keywords=PostgreSQL.md)[Drizzle ORM](https://jobicy.com/jobs?search_keywords=Drizzle%20ORM.md)[Data modeling](https://jobicy.com/jobs?search_keywords=Data%20modeling.md)[Probabilistic modeling](https://jobicy.com/jobs?search_keywords=Probabilistic%20modeling.md)[Cyber risk quantification](https://jobicy.com/jobs?search_keywords=Cyber%20risk%20quantification.md)[Data ingestion pipelines](https://jobicy.com/jobs?search_keywords=Data%20ingestion%20pipelines.md)[Observability](https://jobicy.com/jobs?search_keywords=Observability.md)[OpenTelemetry](https://jobicy.com/jobs?search_keywords=OpenTelemetry.md)[STIX](https://jobicy.com/jobs?search_keywords=STIX.md)[OCSF](https://jobicy.com/jobs?search_keywords=OCSF.md)[End-to-end testing](https://jobicy.com/jobs?search_keywords=End-to-end%20testing.md) Sample interview questionsHow would you design a risk-quantification engine whose assumptions can evolve without losing reproducibility?I would version models, input schemas, assumptions, and calculation code paths, then persist the exact input snapshot and model version used for each result. Each output should expose an auditable lineage from the final loss distribution back to source evidence, transformations, and assumptions. How would you handle delta synchronization and backfills for hundreds of thousands of tenant findings with imperfect timestamps? I would use tenant-scoped cursors, idempotent upserts, durable checkpoints, and reconciliation jobs rather than trusting timestamps alone. The pipeline would include observability for lag, failures, duplicates, and data-quality anomalies, plus safe retry and replay mechanisms. Describe how you would model relationships between threat intelligence, assets, vulnerabilities, and security controls. I would start with a domain model that separates canonical internal concepts from external schemas, using stable identities and explicit relationship types. Adapters for STIX, OCSF, and customer data would map into that model so integrations can evolve without tightly coupling core calculations to one representation. How would you validate a probabilistic model when complete ground-truth loss data is unavailable? I would validate structural correctness, unit consistency, boundary behavior, and sensitivity to assumptions, then compare outputs with expert expectations and historical or simulated scenarios where available. I would also make uncertainty visible and continuously calibrate the model as better evidence becomes available. What is your approach to using coding agents in a security-sensitive engineering environment? I use agents to accelerate exploration, boilerplate, tests, and documentation, but keep human review responsible for architecture, security, correctness, and domain assumptions. Generated code should pass normal review, automated testing, dependency checks, and threat-model considerations before production use. Next step ## Apply now. Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information. Keep exploring ## Related remote jobs. * ![Cloudbeds logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/3aef1a38-221.png) Cloudbeds Nov 9 New ### [Integrations Engineer](https://jobicy.com/jobs/160705-integrations-engineer.md) What Makes Cloudbeds Unique At Cloudbeds, we’re not just building software, we’re transforming hospitality. Our platform powers hotels across 150 countries, processing billions in bookings annually. From boutique properties to… * ![Notabene logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/11/4a566d51800a-221.webp) Notabene Nov 9 New ### [Staff Backend Software Engineer](https://jobicy.com/jobs/160701-staff-backend-software-engineer.md) About Notabene Notabene is on a mission to make crypto a part of the everyday economy. Leading crypto organizations use our tools to reduce transaction risk and make crypto transfers… * ![Wellhub logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/11/86f576549fb3-221.webp) Wellhub Nov 9 New ### [Technical Manager – Platform Services Mobile Foundations](https://jobicy.com/jobs/160691-technical-manager-platform-services-mobile-foundations.md) Your wellbeing, our mission. Join a company shaping a healthier world. GET TO KNOW US At Wellhub we’re revolutionizing workplace wellness. Our platform connects employees worldwide to the best partners… * ![FreeBalance logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/11/34e959b7d773-221.webp) FreeBalance Nov 9 New ### [R&D Global Director](https://jobicy.com/jobs/160688-rd-global-director.md) As a Development Manager, you will lead our global Java software development organization, providing overall leadership, direction, and accountability across multiple engineering teams. You will manage the design, development, modernization,… * ![Wellhub logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/11/86f576549fb3-221.webp) Wellhub Nov 9 New ### [Frontend Manager Software Engineer (Hands-On) | Partners Acquisition](https://jobicy.com/jobs/160680-frontend-manager-software-engineer-hands-on-partners-acquisition.md) Your wellbeing, our mission. Join a company shaping a healthier world. GET TO KNOW US At Wellhub we’re revolutionizing workplace wellness. Our platform connects employees worldwide to the best partners… * ![ClickUp logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/cd5be0ef-221.jpg) ClickUp Nov 9 New ### [Senior AI Developer](https://jobicy.com/jobs/160308-senior-ai-developer.md) At ClickUp, we’re building the future of work: the first truly converged AI workspace unifying tasks, docs, chat, calendar, and enterprise search, all supercharged by context-driven AI. We are an… * ![1Password logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2020/09/WRILS-200909195848-296323.png) 1Password Nov 9 New ### [Developer, Enterprise Tenants and Policies](https://jobicy.com/jobs/160293-developer-enterprise-tenants-and-policies.md) 1Password is growing. We’ve surpassed $500M in ARR and we’re continuing to accelerate, earning a spot on the Forbes Cloud 100 for four years in a row and teaming up… * ![HyperHug logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/11/04d564d3c979-221.webp) HyperHug Nov 9 New ### [Senior Unity Developer](https://jobicy.com/jobs/160280-senior-unity-developer.md) HyperHug is an international game development studio specializing in the shooter genre. Our main office is based in Cyprus, but our talented team works remotely from around the world. We’re… * ![Elevenlabs logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/e01b4c5d-221.png) Elevenlabs Nov 9 New ### [Website Growth Engineer](https://jobicy.com/jobs/160208-website-growth-engineer.md) About ElevenLabs ElevenLabs is an AI research and product company transforming how we interact with technology. We launched in January 2023 with the first human-like AI voice model. Today, we… * ![Testlio logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/11024036-221.png) Testlio Nov 9 New ### [Freelance Software Tester (Remote in Réunion, Monaco)](https://jobicy.com/jobs/159997-freelance-software-tester-remote-in-reunion-monaco.md) Hi there! We are Testlio, a global software testing company with its own freelance network. Our freelancers test apps from companies across the globe. Testlio is a great place for… [Browse all jobs](https://jobicy.com/jobs.md)